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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.1 36(a). In no event, however, may a reply be timely filed 
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DETAILED ACTION 

1 . Claims 1-14 are presented for examination. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-14 have been considered 
but are moot in view of the new ground(s) of rejection. 

Continued Examination Under 37 CFR 1.114 
A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
10/11/07 has been entered. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-14 are rejected under 35 U.S.C. § 103 (a) as being 
unpatentable over Win etaL (hereinafter Win) U.S. Patent No. 6,453,353, in view of 
Wright etal. (hereinafter Wright) U.S. Pub. No. 2004/0123153. 
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5. As to claim 1 , Win teaches a method for authorizing a network device, 
comprising: generating an attribute certificate based, in part, on the attribute (col. 7, line 
34-col. 8, line 46, col. 10, line 34-col. 11, line 9); storing the attribute certificate including 
the attribute (col. 6, line 20-65, col. 10, lines 14-67); and if the attribute certificate is 
valid, authorizing access to a resource over a network based, in part, on the attribute 
associated with the attribute certificate (col. 9, line 14-col. 10, line 67, col.11, line43-col. 
12, line 8). 

Win teaches the feature of determining an attribute based on a capability of users 
(abstract, figure 1, col. 6, lines 58-65, col. 11, line 42-col. 12, line 8). However, Win 
does not explicitly teach determining an attribute based, in part, on a capability of the 
network device. 

Wright teaches the feature of determining an attribute based, in part, on a 
capability of the network device ([0066-0067], [0078]-[0121]). 

It would have been obvious to one of ordinary skill in the Data Processing art at 
the time of the invention was made to combine the teachings of Wright into Win to 
include the feature of determining an attribute based on a capability of a network device 
because it would have provided different levels of security protection for different 
location and/or security features are highly desirable for network device. 

6. As to claim 2, Win teaches attribute is further determined based, in part, 
on an automated security scan of the network device (abstract, col. 5, line 55-col. 6, line 
10, col. 10, lines 34-67). 
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7. As to claim 3, Win teaches wherein the attribute is further determined 
based, in part, on a condition to be satisfied (figure 3, col. 8, lines 5-63). 

8. As to claim 4, Win teaches wherein the attribute is further associated with 
a group of network devices (col. 13, lines 35-67). 

9. As to claim 5, Win teaches wherein the attribute is further associated with 
a group of users (col. 13, lines 35-67). 

10. As to claim 6, Win teaches, wherein the attribute certificate is generated 
by at least one of the network device, an access server, and an attribute authority 
(figure 1). 

11. As to claim 7, Win teaches wherein the attribute certificate is stored in at 
least one of the network device, and an attribute repository (figure 1). 

12. As to claim 8, Win teaches wherein the attribute certificate is provided to 
an access server through the use of at least one of a cookie, a program, and a manual 
upload (col. 10, line 41 -col. 12, lines 8). 
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13. As to claim 9, Win teaches a network device for managing authorization to 
a resource over a network, comprising: a second component, coupled to the first 
component, configured to store the attribute certificate (col. 7, line 34-col. 8, line 46, col. 
10, line 34-col. 11, line 9); and a third component, coupled to the second component, 
configured to authorize the other network device to the resource over the network 
based, in part, on the attribute of the other network device associated with the attribute 
certificate (col. 9, line 14-col. 10, line 67, col.11, line 43-col. 12, line 8). 

Win teaches a first component configured to generate an attribute certificate, 
wherein the attribute certificate is based, in part, on a capability of users (abstract, figure 
1 , col. 6, lines 58-65, col. 1 1 , line 42-col. 12, line 8). However, Win does not explicitly 
teach a first component configured to generate an attribute certificate, wherein the 
attribute certificate is based, in part, on a capability of another network device. 

Wright teaches a first component configured to generate an attribute certificate, 
wherein the attribute certificate is based, in part, on a capability of another network 
device ([0066-0067], [0078]-[0121]). 

It would have been obvious to one of ordinary skill in the Data Processing art at 
the time of the invention was made to combine the .teachings of Wright into Win to 
include the feature of determining an attribute based on a capability of a network device 
because it would have provided different levels of security protection for different 
location and/or security features are highly desirable for network device. 
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14. As to claim 10, Win teaches wherein the first component is further 
configured to generate the attribute certificate based on a condition to be satisfied 
(figure 3, col. 8, lines 5-63). 

15. As to claim 1 1 , Win teaches further comprising a fourth component that is 
configured to perform an automated security scan of the other network device (abstract, 
col. 5, line 55-col. 6, line 10, col. 10, lines 34-67). 

16. As to claim 12, Win teaches wherein the first component is further 
configured to generate the attribute certificate based on the automated security scan of 
the other network device (abstract, col. 5, line 55-col. 6, line 10, col. 10, lines 34-67). 

17. As to claim 1 3, Win teaches wherein the second component is further 
configured to send the attribute certificate to the other network device to be stored, and 
the third component it further configured to receive the attribute certificate (figure 1). 

18. As to claim 14, Win teaches a network device for managing authorization 
to a resource over a network, comprising: a means for generating an attribute 
certificate, wherein the attribute certificate is based on a capability of users (abstract, 
figure 1, col. 6, lines 58-65, col. 11, line 42-col. 12, line 8); a means for storing the 
attribute certificate (col. 7, line 34-col. 8, line 46, col. 10, line 34-col. 11, line 9); and a 
means for authorizing the other network device to the resource over the network based, 
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in part, on the attribute of the other network device associated with the attribute 
certificate (col. 9, line 14-col. 10, line 67, col. 11, line 43-col. 12, line 8). 

However, Win does not explicitly teach a means for generating an attribute 
certificate, wherein the attribute certificate is based on a capability of another network 
device. 

Wright teaches a means for generating an attribute certificate, wherein the 
attribute certificate is based on a capability of another network device ([0066-0067], 
[0078]-[0121]). 

It would have been obvious to one of ordinary skill in the Data Processing art at 
the time of the invention was made to combine the teachings of Wright into Win to 
include the feature of determining an attribute based on a capability of a network device 
because it would have provided different levels of security protection for different 
location and/or security features are highly desirable for network device. 

Conclusion 

1 9. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

20. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Thu Ha Nguyen, whose telephone number is (571) 
272-3989. The examiner can normally be reached Monday through Friday from 8:30 
AM to 5:00 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glenton Burgess, can be reached at (571) 272-3949. 

The fax phone numbers for the organization where this application or proceeding 
is assigned are (571) 273-8300 for regular communications. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov . Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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